You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Defender detects spyware in C:\Program Files (x86)\timesink

Defender noted spyware called Conducent-Timesinkor something. I don't remember the name and defender doesn't have the record anymore.

I do have some spyware but hitman pro, malware bytes pro, combofix windows defender does not find or fix it. Not even in safe mode or kickstart.

Defender showed it once and said access was blocked to delete the file.

When I looked at the reporting it said it was located in C:\Program Files (x86)\timesink.... but that folder does not exist under any user or safemode.

I get redirect popups that I can decline. Task manager shows multiple IExplorer task logs running and when I reboot I get a flash from malware bytes of a blocked internet access attempt.

94.242.233.162 (Type: outgoing, Port: 49401, Process: iexplore.exe)

Here is the defender record of it:

Error encountered:
Code 0x80070005. Access is denied.

Category:
Spyware

Description:
This program has potentially unwanted behavior.

Advice:
Review the alert details to see why the software was detected. If you do not like how the software operates or if you do not recognize and trust the publisher, consider blocking or removing the software.